Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/NCpGZNtKHd6_fMVcg-g0eLazHxQ.roa
File: NCpGZNtKHd6_fMVcg-g0eLazHxQ.roa (raw, json)
Hash identifier: Mhzdm/rVm6JJ4//ur4+Oz4zOkFNIEnDSrq0Y6UkjRl0=
Subject key identifier: 34:2A:46:64:DB:4A:1D:DE:BF:7C:C5:5C:83:E8:34:78:B6:B3:1F:14
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 25
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NCpGZNtKHd6_fMVcg-g0eLazHxQ.roa
Signing time: Sat 20 Feb 2021 08:03:56 +0000
ROA not before: Sat 20 Feb 2021 08:03:56 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 9621
IP address blocks: 202.81.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Feb 20 08:03:56 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=342A4664DB4A1DDEBF7CC55C83E83478B6B31F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:12:27:1d:d5:f6:67:af:f3:9d:fa:e0:21:
f0:bb:a9:d3:63:28:61:65:9f:78:30:58:99:84:97:
b4:0b:6f:fd:17:6c:f9:35:56:45:30:1f:49:13:83:
a2:9a:8d:76:da:11:a4:d4:50:16:58:e7:1b:9b:6b:
ef:9a:ed:9d:38:6a:96:14:b1:5a:0a:19:b7:9b:b6:
a8:cc:59:89:85:2c:ed:54:d6:f8:8b:9c:5f:bb:23:
d6:f1:e6:5d:ef:17:31:c8:98:8b:67:53:11:39:17:
0c:44:08:41:3d:c4:5d:3f:05:3a:fc:41:14:00:46:
94:57:b6:42:b3:11:79:cf:23:96:a9:06:e0:06:72:
8a:35:e9:66:14:0a:c3:b1:9c:c5:0f:72:27:57:8a:
81:0d:c2:41:2d:07:96:69:a3:bd:ab:92:49:ec:45:
f7:63:38:4f:54:22:3b:21:b0:f8:6a:36:0e:2f:23:
f3:0c:fb:4b:d5:90:77:73:e3:83:50:e8:a0:76:71:
bb:fc:49:b0:17:07:88:00:ee:19:6a:87:37:24:b3:
5b:9f:ac:58:01:af:19:27:ee:d6:e0:4e:c5:68:66:
29:f8:44:b8:d3:d5:56:1b:4d:a9:08:b7:72:2d:50:
fa:68:95:7f:c5:d9:ae:b1:54:bb:6e:24:e0:bb:95:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:46:64:DB:4A:1D:DE:BF:7C:C5:5C:83:E8:34:78:B6:B3:1F:14
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NCpGZNtKHd6_fMVcg-g0eLazHxQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.81.8.0/21
Signature Algorithm: sha256WithRSAEncryption
38:bb:34:cd:ee:25:0b:0b:ee:9f:b7:08:66:d7:3b:38:e6:19:
58:bd:fc:fc:33:e7:bc:3c:4c:48:46:aa:f6:fd:d6:75:b8:c4:
e1:d3:12:ba:a7:20:9c:74:4a:17:3e:8a:93:d5:f9:a2:ff:20:
3c:29:0a:5d:0d:e2:93:0c:eb:25:73:43:35:df:e5:ab:9f:96:
04:04:6e:75:5b:2f:2a:77:05:08:50:2a:3a:f7:4d:c1:40:9b:
2a:ca:66:e9:d6:4d:98:68:b6:94:e4:aa:0f:61:bf:7b:03:a4:
de:0b:91:37:e4:8e:cc:35:e3:df:f9:18:23:1b:ea:f5:c0:9d:
84:35:7e:51:c0:5b:aa:c7:fa:59:52:86:74:02:70:12:1a:b2:
c0:93:55:2c:ba:aa:a3:96:ea:24:0b:50:eb:69:a8:dd:c3:18:
a4:49:bf:a0:7e:8b:11:a3:07:3a:3c:90:32:c2:3e:d8:ae:6d:
4a:14:08:da:bf:97:d3:05:d4:fd:21:1f:7e:23:63:59:a7:9f:
39:56:60:91:64:23:24:38:3f:ee:9b:6a:5c:cb:2a:cf:00:df:
8d:5c:b9:f7:55:15:af:64:7e:54:57:e1:df:a0:50:1d:a8:50:
28:60:1b:1a:f9:0d:4a:24:51:56:ce:d7:08:c2:4b:d0:c3:2f:
5a:7f:89:cb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4
MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIxMDIyMDA4
MDM1NloXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMzQyQTQ2NjREQjRBMURE
RUJGN0NDNTVDODNFODM0NzhCNkIzMUYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMTzEicd1fZnr/Od+uAh8Lup02MoYWWfeDBYmYSXtAtv/Rds+TVW
RTAfSRODopqNdtoRpNRQFljnG5tr75rtnThqlhSxWgoZt5u2qMxZiYUs7VTW+Iuc
X7sj1vHmXe8XMciYi2dTETkXDEQIQT3EXT8FOvxBFABGlFe2QrMRec8jlqkG4AZy
ijXpZhQKw7GcxQ9yJ1eKgQ3CQS0HlmmjvauSSexF92M4T1QiOyGw+Go2Di8j8wz7
S9WQd3Pjg1DooHZxu/xJsBcHiADuGWqHNySzW5+sWAGvGSfu1uBOxWhmKfhEuNPV
VhtNqQi3ci1Q+miVf8XZrrFUu24k4LuVCFECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQ0KkZk20od3r98xVyD6DR4trMfFDAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn
4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ
TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84OTcvTkNwR1pOdEtIZDZfZk1WY2ctZzBlTGF6SHhRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pRCDANBgkqhkiG9w0BAQsFAAOCAQEA
OLs0ze4lCwvun7cIZtc7OOYZWL38/DPnvDxMSEaq9v3WdbjE4dMSuqcgnHRKFz6K
k9X5ov8gPCkKXQ3ikwzrJXNDNd/lq5+WBARudVsvKncFCFAqOvdNwUCbKspm6dZN
mGi2lOSqD2G/ewOk3guRN+SOzDXj3/kYIxvq9cCdhDV+UcBbqsf6WVKGdAJwEhqy
wJNVLLqqo5bqJAtQ62mo3cMYpEm/oH6LEaMHOjyQMsI+2K5tShQI2r+X0wXU/SEf
fiNjWaefOVZgkWQjJDg/7ptqXMsqzwDfjVy591UVr2R+VFfh36BQHahQKGAbGvkN
SiRRVs7XCMJL0MMvWn+Jyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org